Apple Pay Express Transit Mode, When Used With a Visa Card, Is Vulnerable to Scam Card Readers

A vulnerability in Apple Pay's Express Transit Mode allows attackers with physical access to steal funds from locked iPhones when a Visa card is linked. Researchers from the University of Surrey and University of Birmingham developed the exploit, which uses specialized NFC hardware to intercept payment communications. The attack doesn't work with Mastercard or American Express, indicating the flaw is specific to Visa's security model.